Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa
File: 0c0f1667-bdd4-3810-ab75-9771278ab789.roa (raw, json)
Hash identifier: LKClsU30t7c33Df5GZhrZ8iQSU3vKxlylm+4iXzNa7I=
Subject key identifier: DE:B2:8A:A2:4F:86:B6:57:C7:ED:7B:6B:9D:C7:E2:B6:9A:C4:66:A5
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584858A057C1E401CA6F7D60AE40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa
Signing time: Fri 27 Dec 2024 14:00:52 +0000
ROA not before: Fri 27 Dec 2024 14:00:52 +0000
ROA not after: Thu 27 Mar 2025 13:00:52 +0000
asID: 31898
IP address blocks: 68.64.2.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:58:a0:57:c1:e4:01:ca:6f:7d:60:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Dec 27 14:00:52 2024 GMT
Not After : Mar 27 13:00:52 2025 GMT
Subject: CN=4dae78fc-12a7-4c28-b1b4-87f0d732a8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:35:13:c7:aa:6a:7b:d7:cb:e4:78:ab:8f:
c2:92:2c:5f:cd:e5:e2:78:4c:c9:b9:78:75:6a:4c:
47:67:af:bf:97:27:7b:14:56:3b:56:c6:d4:03:e8:
78:30:2d:2a:09:4a:f2:0d:4d:9b:5a:73:90:b6:73:
53:ab:96:a2:44:25:f2:fc:d4:19:e1:03:61:8f:11:
08:7b:7d:7a:df:a3:68:86:b8:95:0e:bf:54:02:70:
8a:0b:2a:9f:eb:2b:93:eb:fd:c7:6f:00:c5:67:5f:
1e:81:22:4d:25:62:82:02:7a:19:10:b6:91:df:3f:
42:84:ed:9f:e2:96:fe:ac:57:52:a3:ad:d5:bd:ad:
96:b3:9f:d6:ce:94:8b:9b:8c:c5:89:a7:d0:95:a3:
95:5d:1c:ba:3c:96:a3:e1:87:84:ce:d7:04:a1:05:
7b:a8:5e:7e:28:a7:62:97:25:6a:2c:f1:0c:bd:e7:
24:bb:f0:e4:a6:1e:1d:78:e9:86:6e:af:82:34:27:
83:47:78:22:86:62:bd:2f:8b:85:c6:51:aa:69:b0:
5d:a9:bd:1b:a2:e0:06:2f:e0:bf:3a:38:96:c4:ba:
da:64:68:9c:c1:07:bb:8f:05:0c:3e:9f:98:6d:51:
27:67:5d:59:45:3f:14:6f:c3:84:67:d9:5c:7c:c9:
88:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B2:8A:A2:4F:86:B6:57:C7:ED:7B:6B:9D:C7:E2:B6:9A:C4:66:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0c0f1667-bdd4-3810-ab75-9771278ab789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:05:d2:1f:b5:3d:9c:43:e2:ae:d3:bb:7b:0d:75:29:53:50:
af:87:63:e9:27:cc:38:45:83:3d:f4:2c:56:fb:07:6b:0c:5b:
51:ed:16:be:45:9c:ed:46:c2:d6:96:ef:1a:63:16:f8:32:6b:
02:03:84:86:c0:98:85:f3:d2:ee:4b:01:40:d4:10:87:f7:30:
af:aa:4c:fd:19:19:6b:c5:6f:02:b1:41:f6:8a:ef:dc:39:7f:
dd:d3:d8:09:bb:5a:94:ec:c8:f5:82:ba:23:80:16:28:ba:44:
95:a3:9a:77:d8:fb:89:7b:1f:df:31:77:f9:55:b5:d2:6f:e4:
6f:f3:62:62:be:c9:08:c7:df:fc:82:11:12:0a:da:80:ba:f8:
ad:18:1b:42:50:f4:ba:47:5a:d2:ae:58:60:5c:13:17:c4:f5:
52:7a:f5:88:ae:02:72:d4:1b:6d:b6:66:46:76:f4:b7:04:09:
87:dd:66:38:09:ce:6d:e2:bd:41:49:d8:ff:93:25:d6:95:2c:
76:be:c0:ed:41:ac:bb:55:0e:93:41:c2:ca:29:c1:3e:bb:87:
88:ac:94:a0:61:6b:b4:1e:4a:34:e9:e9:cc:fa:db:9e:1e:b6:
09:e2:50:be:e4:ed:2a:be:b7:81:99:ac:b2:d5:b8:0e:4c:f4:
97:d0:f4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:16 2025 by rpki-client